diff --git a/config/rootfiles/packages/aarch64/samba b/config/rootfiles/packages/aarch64/samba
index 708d9b42e..7d261bc58 100644
--- a/config/rootfiles/packages/aarch64/samba
+++ b/config/rootfiles/packages/aarch64/samba
@@ -661,6 +661,7 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py
 #usr/lib/python3.10/site-packages/samba/tests/ndr
 #usr/lib/python3.10/site-packages/samba/tests/ndr/gkdi.py
 #usr/lib/python3.10/site-packages/samba/tests/ndr/gmsa.py
+#usr/lib/python3.10/site-packages/samba/tests/ndr/sd.py
 #usr/lib/python3.10/site-packages/samba/tests/ndr/wbint.py
 #usr/lib/python3.10/site-packages/samba/tests/net_join.py
 #usr/lib/python3.10/site-packages/samba/tests/net_join_no_spnego.py
@@ -930,7 +931,6 @@ usr/lib/samba/libsmbpasswdparser-private-samba.so
 usr/lib/samba/libsocket-blocking-private-samba.so
 usr/lib/samba/libstable-sort-private-samba.so
 usr/lib/samba/libsys-rw-private-samba.so
-usr/lib/samba/libtalloc-private-samba.so
 usr/lib/samba/libtalloc-report-printf-private-samba.so
 usr/lib/samba/libtalloc-report-private-samba.so
 usr/lib/samba/libtdb-private-samba.so
@@ -939,6 +939,7 @@ usr/lib/samba/libtevent-private-samba.so
 usr/lib/samba/libtevent-util-private-samba.so
 usr/lib/samba/libtime-basic-private-samba.so
 usr/lib/samba/libtorture-private-samba.so
+usr/lib/samba/libutil-crypt-private-samba.so
 usr/lib/samba/libutil-reg-private-samba.so
 usr/lib/samba/libutil-setid-private-samba.so
 usr/lib/samba/libutil-tdb-private-samba.so
diff --git a/config/rootfiles/packages/riscv64/samba b/config/rootfiles/packages/riscv64/samba
index b55e3be9f..bf7d3f069 100644
--- a/config/rootfiles/packages/riscv64/samba
+++ b/config/rootfiles/packages/riscv64/samba
@@ -661,6 +661,7 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py
 #usr/lib/python3.10/site-packages/samba/tests/ndr
 #usr/lib/python3.10/site-packages/samba/tests/ndr/gkdi.py
 #usr/lib/python3.10/site-packages/samba/tests/ndr/gmsa.py
+#usr/lib/python3.10/site-packages/samba/tests/ndr/sd.py
 #usr/lib/python3.10/site-packages/samba/tests/ndr/wbint.py
 #usr/lib/python3.10/site-packages/samba/tests/net_join.py
 #usr/lib/python3.10/site-packages/samba/tests/net_join_no_spnego.py
@@ -930,7 +931,6 @@ usr/lib/samba/libsmbpasswdparser-private-samba.so
 usr/lib/samba/libsocket-blocking-private-samba.so
 usr/lib/samba/libstable-sort-private-samba.so
 usr/lib/samba/libsys-rw-private-samba.so
-usr/lib/samba/libtalloc-private-samba.so
 usr/lib/samba/libtalloc-report-printf-private-samba.so
 usr/lib/samba/libtalloc-report-private-samba.so
 usr/lib/samba/libtdb-private-samba.so
@@ -939,6 +939,7 @@ usr/lib/samba/libtevent-private-samba.so
 usr/lib/samba/libtevent-util-private-samba.so
 usr/lib/samba/libtime-basic-private-samba.so
 usr/lib/samba/libtorture-private-samba.so
+usr/lib/samba/libutil-crypt-private-samba.so
 usr/lib/samba/libutil-reg-private-samba.so
 usr/lib/samba/libutil-setid-private-samba.so
 usr/lib/samba/libutil-tdb-private-samba.so
diff --git a/config/rootfiles/packages/x86_64/samba b/config/rootfiles/packages/x86_64/samba
index a355246be..988370a16 100644
--- a/config/rootfiles/packages/x86_64/samba
+++ b/config/rootfiles/packages/x86_64/samba
@@ -661,6 +661,7 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py
 #usr/lib/python3.10/site-packages/samba/tests/ndr
 #usr/lib/python3.10/site-packages/samba/tests/ndr/gkdi.py
 #usr/lib/python3.10/site-packages/samba/tests/ndr/gmsa.py
+#usr/lib/python3.10/site-packages/samba/tests/ndr/sd.py
 #usr/lib/python3.10/site-packages/samba/tests/ndr/wbint.py
 #usr/lib/python3.10/site-packages/samba/tests/net_join.py
 #usr/lib/python3.10/site-packages/samba/tests/net_join_no_spnego.py
@@ -930,7 +931,6 @@ usr/lib/samba/libsmbpasswdparser-private-samba.so
 usr/lib/samba/libsocket-blocking-private-samba.so
 usr/lib/samba/libstable-sort-private-samba.so
 usr/lib/samba/libsys-rw-private-samba.so
-usr/lib/samba/libtalloc-private-samba.so
 usr/lib/samba/libtalloc-report-printf-private-samba.so
 usr/lib/samba/libtalloc-report-private-samba.so
 usr/lib/samba/libtdb-private-samba.so
@@ -939,6 +939,7 @@ usr/lib/samba/libtevent-private-samba.so
 usr/lib/samba/libtevent-util-private-samba.so
 usr/lib/samba/libtime-basic-private-samba.so
 usr/lib/samba/libtorture-private-samba.so
+usr/lib/samba/libutil-crypt-private-samba.so
 usr/lib/samba/libutil-reg-private-samba.so
 usr/lib/samba/libutil-setid-private-samba.so
 usr/lib/samba/libutil-tdb-private-samba.so
diff --git a/lfs/samba b/lfs/samba
index c76801786..e9529a176 100644
--- a/lfs/samba
+++ b/lfs/samba
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 4.21.3
+VER        = 4.21.4
 SUMMARY    = A SMB/CIFS File, Print, and Authentication Server
 
 THISAPP    = samba-$(VER)
@@ -33,7 +33,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = samba
-PAK_VER    = 110
+PAK_VER    = 111
 
 DEPS       = avahi libtalloc perl-Parse-Yapp wsdd
 
@@ -47,7 +47,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 6e7bb59d6dee89c797023d172048f10504179256da448d5606748c56d481a29754eef1d8ef3f0ae3ac94b033c359a5fb38ed9ee6d4619dcfe8678b6415574ffd
+$(DL_FILE)_BLAKE2 = 37c3b924799369dfe7a9ac208d3e470d4c41c45eb725f973e6948c3581523abe5fe768ea0a82e38c5a1cf5ad238896ddfd1783a1adebc9fa6d42fbb6769e9bdb
 
 install : $(TARGET)
 
